Deployment Architecture

Database Connection

harshavrath
Contributor

Hi
My Splunk is installed in one server and my Database's are deployed on other server,in order to connect these two what would i require only Splunk DBconnect is enough or should i use Universal Forwarder also.

My Splunk is installed on windows server 2003 and my Database is on Linux Server.

Please Shed some Light on this,

Any Help is appreciated.

Cheers.

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Use both. DB Connect will get data out of your database into Splunk. The Universal Forwarder will pass on information about the server itself (disk usage, CPU usage, logs, etc.).

---
If this reply helps you, Karma would be appreciated.

View solution in original post

kaufmanm
Communicator

You'll just need to install the DB Connect application on your Windows Splunk indexer and it will be able to connect to the database and run queries assuming the firewalls allow the access.

richgalloway
SplunkTrust
SplunkTrust

Use both. DB Connect will get data out of your database into Splunk. The Universal Forwarder will pass on information about the server itself (disk usage, CPU usage, logs, etc.).

---
If this reply helps you, Karma would be appreciated.

harshavrath
Contributor

how will i configure Splunk DBConnect to read/connect to a database which is situated on some other server.?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Yes. Use of Splunk Universal Forwarder is optional.

---
If this reply helps you, Karma would be appreciated.

harshavrath
Contributor

Can i use only Splunk DB Connect which will gather data from DB,as i don't need data about server(disk usage,CPU usage etc).
I only want the data from Database which is located on some other server.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

That is correct.

---
If this reply helps you, Karma would be appreciated.

MoizLokhandwala
New Member

Can I install and configure DB Connect on the universal forwarder ?

0 Karma

harshavrath
Contributor

so the DBconnect will be installed on windows where my Splunk is installed and the forwarder will be installed on the server where my DB is located.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...